Generally, FortiGate settings are configured exclusively at one database (Device Database, or Policy Package ADOM DB). One exception is system admins configured with remote authentication.
Remote authentication server should always be configured under Policy & Objects -> Object Configuration. The admin settings are configured under Device Manager.
1) Policy & Objects -> Object Configurations -> User & Devices
a) Select Remote Server type (LDAP, RADIUS, TACACS+)
b) Configure server IP/secret and save
2) Policy & Objects -> Object Configurations -> User & Devices -> User Groups
a) Create New Remote Authentication Server
3) Device Manager -> Edit Device -> System -> Administrator
a)
Configure Remote User Group with group created
from step 2
b) User Group list is pulled from ADOM Database, instead of Device DB
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.